internal/

Package audit provides hash-chain log, export, and verification for the AgentPaaS daemon.

Package cli implements the AgentPaaS CLI command surface using cobra.

Package daemon provides the AgentPaaS control daemon — a Unix-socket-bound gRPC server that implements the ControlService API.

Package dashboard provides the embedded web dashboard for AgentPaaS. The dashboard is a Preact/TypeScript SPA compiled to static assets and embedded via go:embed.

Package dockerclient provides a Docker client factory that mirrors the Docker CLI's endpoint discovery order.

Package doctor provides system diagnostic checks for agentpaas.

Package events provides the event bus and webhook delivery mechanism.

Package harness runs Python agent code behind a local HTTP lifecycle API.

Package home provides the agentpaas home directory layout, discovery, and secure permission management.

Package identity provides the local CA, agent keys, and SVID issuance.

Package logging provides structured logging with built-in redaction for sensitive data.

Package mcpmanager manages MCP server resources declared in agent policy.

Package operator provides the stable machine-readable diagnosis and repair-hint layer consumed by the AgentPaaS CLI, dashboard, and Block 13 MCP/Hermes integrations.

Package otel provides the in-process OpenTelemetry collector and SQLite WAL store for AgentPaaS observability data.

Package pack provides the build pipeline, SBOM, signing, and secret scanning.

Package policy parses, validates, and compiles policy into agentgateway configuration.

Package runtime provides the RuntimeDriver interface and its docker implementation.

Package secrets provides SecretStore implementations for local profile secrets.

Package service generates launchd and systemd service unit files for the AgentPaaS daemon (agentpaasd).

Package trigger serves the AgentPaaS Trigger API over gRPC on port 7718 and REST through grpc-gateway on port 7717.